CVE-2026-64286: linux kernel from 6.2 (inclusive), before 6.6.145 (exclusive), from 6.7 (inclusive), before 6.12.97 (exclusive), from…

Affected technology

linux kernel · from 6.2 (inclusive), before 6.6.145 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.97 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.39 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.1.4 (exclusive)
linux

Linux · be66e67f175096f283c9d5614c4991fc9e7ed975 to before 477145860dba4c30f0b4e36f02f4c5291c1c888b, be66e67f175096f283c9d5614c4991fc9e7ed975 to before dfaef40d8a1533940fc1af788d70fce07362b4ce, be66e67f175096f283c9d5614c4991fc9e7ed975 to before 6bea2f8becdb20d34378493c3b77a9b9cf8c6cfa, be66e67f175096f283c9d5614c4991fc9e7ed975 to before d4f4d61715d1061ba83b88196a3605662be30750, be66e67f175096f283c9d5614c4991fc9e7ed975 to before e8042f6e1d7befb2fb6b10a75918642bcd0acf9a
Linux

Linux · 6.2
Linux

Component: Not specified by the source
File: arch/arm64/kvm/hyp/nvhe/hyp-main.c

Attack conditions (Source advisory, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.2/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.